Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
File: ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft (raw, json)
Hash identifier: o1AuRFbl+FllnawBkNgxD1KXv7UPTqcM5rVGwe0Pr04=
Subject key identifier: 69:1B:5C:B7:A0:FE:E5:93:12:D6:97:D1:78:30:21:BA:78:98:CF:F8
Authority key identifier: B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39
Certificate issuer: /CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
Certificate serial: 0196545C24D5164EC6AEAE1A6338AF605AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 18:00:46 +0000
Manifest this update: Sun 20 Apr 2025 18:00:46 +0000
Manifest next update: Mon 21 Apr 2025 18:00:46 +0000
Files and hashes: 1: LLY-3_fqqLwuU8xUzGv0VRuhlCE.roa (hash: 4AsxSz12Bf5YH8H2MmV75bbJxBPmSJ6rFj3b/HihsTo=)
2: ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl (hash: lrEPHXvxb4OrzNgRF6tvJRjCGYPu5F5k0GB+EN6aZAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:24:d5:16:4e:c6:ae:ae:1a:63:38:af:60:5a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
Validity
Not Before: Apr 20 18:00:46 2025 GMT
Not After : Apr 21 18:00:46 2025 GMT
Subject: CN=691b5cb7a0fee59312d697d1783021ba7898cff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bb:3a:7a:93:0b:93:c6:c5:9a:e3:84:95:65:
96:59:15:d5:9f:ed:8a:bb:c6:4a:fe:eb:6a:4a:2a:
7b:47:22:80:28:6a:55:7a:33:ac:8e:8e:c2:70:64:
79:fa:a2:51:c8:29:fd:2b:c8:a3:1a:40:b4:4d:68:
4c:c0:f8:75:79:27:98:38:81:e0:45:6d:dc:48:46:
64:ef:d4:e7:3f:07:24:01:56:19:47:2d:8d:c3:5f:
a6:22:71:c4:7c:34:d9:e6:e4:7b:53:09:d5:72:22:
20:76:9f:0a:9d:cc:96:0a:87:0c:6e:49:48:42:0d:
25:e5:c7:2e:8f:92:4a:f4:78:45:7f:e8:26:2d:85:
f3:1b:b1:60:86:21:fa:37:e0:f2:51:0a:ec:90:66:
55:0a:94:3b:73:a0:ca:33:75:27:97:d3:04:52:1f:
7c:f5:72:e3:4d:24:1b:2a:62:4b:82:7f:ab:ff:a2:
a6:46:c6:16:71:c4:42:b8:a6:0c:5c:0e:ea:1b:f6:
1e:95:4e:6d:de:59:1e:32:54:93:8f:14:a8:09:fd:
c3:7d:eb:e2:1e:e0:ca:f7:07:58:ca:54:6c:80:8c:
c0:30:0a:f2:72:72:97:f0:d9:ea:a8:bb:d5:06:e3:
83:db:0f:b5:b0:1d:b4:28:0c:64:54:9e:3e:0a:f8:
0f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1B:5C:B7:A0:FE:E5:93:12:D6:97:D1:78:30:21:BA:78:98:CF:F8
X509v3 Authority Key Identifier:
keyid:B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e8:82:8c:92:9c:9d:23:0a:45:7f:aa:91:e1:84:8c:ef:7d:
2a:e0:d4:b0:a0:32:b8:e2:d7:b2:34:f9:19:2a:b8:ce:89:82:
6b:4f:1b:f7:41:91:aa:79:78:6c:81:5f:9d:47:cd:25:01:3d:
ce:4c:07:d0:54:0e:4a:b1:fb:57:c5:3f:26:bf:96:a6:23:9c:
a9:c3:3c:b4:61:b8:54:fe:fb:f4:f5:d4:89:2c:34:51:76:8f:
87:52:13:38:e8:4f:81:e5:89:49:ae:6b:87:9a:69:91:5d:a2:
7a:e8:e8:a5:5e:d3:db:c3:e4:9a:e8:2e:d0:35:9d:bd:6f:fc:
9a:f9:71:d4:06:e5:98:78:5c:49:29:1f:bc:0f:b5:ca:cc:96:
e7:8d:32:55:0e:3a:90:a2:7d:d9:ed:a5:8e:db:f7:a1:00:e2:
e1:58:5f:f5:bf:c6:70:ee:fa:8a:7a:fb:15:29:25:3b:ce:28:
02:ca:16:6e:42:c3:ea:99:75:2d:4c:33:1c:c2:22:3f:a4:2b:
b3:74:ce:4c:4b:49:0b:b9:45:ec:e5:4a:ea:f9:c5:36:71:79:
f6:8a:59:3a:1d:2c:70:89:c6:96:89:d7:b2:06:a9:bc:11:97:
84:fe:3d:f8:cd:fb:d7:ef:ae:8b:05:68:dc:6f:9f:73:b3:a8:
a6:78:10:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUXCTVFk7Grq4aYzivYFrGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZWFhOTliMWI1NWI0ZTUwYjVkOWVjY2RlZWNkZjM4OTI0
NzM1MzkwHhcNMjUwNDIwMTgwMDQ2WhcNMjUwNDIxMTgwMDQ2WjAzMTEwLwYDVQQD
Eyg2OTFiNWNiN2EwZmVlNTkzMTJkNjk3ZDE3ODMwMjFiYTc4OThjZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bs6epMLk8bFmuOElWWWWRXVn+2K
u8ZK/utqSip7RyKAKGpVejOsjo7CcGR5+qJRyCn9K8ijGkC0TWhMwPh1eSeYOIHg
RW3cSEZk79TnPwckAVYZRy2Nw1+mInHEfDTZ5uR7UwnVciIgdp8KncyWCocMbklI
Qg0l5ccuj5JK9HhFf+gmLYXzG7FghiH6N+DyUQrskGZVCpQ7c6DKM3Unl9MEUh98
9XLjTSQbKmJLgn+r/6KmRsYWccRCuKYMXA7qG/YelU5t3lkeMlSTjxSoCf3Dfevi
HuDK9wdYylRsgIzAMArycnKX8NnqqLvVBuOD2w+1sB20KAxkVJ4+CvgPdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkbXLeg/uWTEtaX0XgwIbp4mM/4MB8GA1UdIwQY
MBaAFLnqqZsbVbTlC12ezN7s3ziSRzU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVxcG14dFZ0T1VMWFo3TTN1emZPSkpITlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81NWEyNzctMDM2ZS00NzM3LTlhZjEt
ZDNiZWMwNmFjOGUxLzEvdWVxcG14dFZ0T1VMWFo3TTN1emZPSkpITlRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81NWEyNzctMDM2ZS00NzM3LTlhZjEtZDNiZWMwNmFjOGUx
LzEvdWVxcG14dFZ0T1VMWFo3TTN1emZPSkpITlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+iCjJKc
nSMKRX+qkeGEjO99KuDUsKAyuOLXsjT5GSq4zomCa08b90GRqnl4bIFfnUfNJQE9
zkwH0FQOSrH7V8U/Jr+WpiOcqcM8tGG4VP779PXUiSw0UXaPh1ITOOhPgeWJSa5r
h5ppkV2ieujopV7T28Pkmugu0DWdvW/8mvlx1AblmHhcSSkfvA+1ysyW540yVQ46
kKJ92e2ljtv3oQDi4Vhf9b/GcO76inr7FSklO84oAsoWbkLD6pl1LUwzHMIiP6Qr
s3TOTEtJC7lF7OVK6vnFNnF59opZOh0scInGlonXsgapvBGXhP49+M371++uiwVo
3G+fc7OopngQ6Q==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:51:13 2025 by rpki-client